Hi, I've setup ELK for Netflow analysis and overall everything seems to be working fine. The only problem I'm seeing is the Netflow codec is not matching interface information of the router. For instance, I'm not seeing any hits for the indice I setup for ports Gig0/0.50 or Gi0/1 on my Cisco ISR …

Netflow Codec Not Matching Interface from Netflow Export

warkolm (Mark Walkom) December 23, 2015, 10:31pm 2

I don't know netflow very well, but are you using a compatible version? We only support v5 and v9.

Topic		Replies	Views
Can't parse netflow by logstash codec Logstash	1	1117	March 12, 2018
Netflow codec: No matching template Logstash	3	1355	April 24, 2017
Logstack netflow getting error for Netflowversion 9 Logstash	3	1203	January 21, 2017
Logstash-codec-netflow: Unsupported field in template 258 {:type=>44999, :length=>32} [Cisco ASR-1001-X] Logstash	2	811	October 9, 2019
5.6.1 Netflow not working Logstash	1	1055	October 25, 2017